
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier: L2TMforjwq4O2xC0V80Jt10ZAUn12GQa1wzpac81vrg=
Subject key identifier: 3C:43:90:06:0D:10:8E:72:AF:18:88:20:D9:E6:7C:47:B5:8A:77:8E
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial: 0593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number: 0585
Signing time: Fri 12 Jun 2026 23:17:48 +0000
Manifest this update: Fri 12 Jun 2026 23:17:47 +0000
Manifest next update: Fri 19 Jun 2026 23:17:47 +0000
Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: Dkr6Y/QEq0yrRKE+vyAch5gnG7kPtxkDnU41AQ7bFBI=)
2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: tZDhIMTLHb3NbSs7t7zGCwhDrXMR5MLwG/mByKSsB2E=)
3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: TzSLplKK/HJS9afWmcTODUx8ULZ9/J0l/ynIkBKB7MM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Validity
Not Before: Jun 12 23:17:47 2026 GMT
Not After : Jun 19 23:17:47 2026 GMT
Subject: CN=6a2c939c-05d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:e5:c3:d8:2e:ba:41:08:10:ab:43:3d:f7:
67:e8:c1:99:82:fc:c3:35:c4:8d:76:9d:57:97:00:
e9:fc:8a:b3:63:06:fa:86:3f:15:cc:dd:9a:45:a5:
a0:67:5e:23:43:5d:7c:2e:8b:c2:23:bb:90:7a:3e:
3f:35:3b:ac:0a:ff:7d:30:7d:21:b4:94:0f:e2:3d:
2d:4f:05:5e:bd:d5:bb:fd:64:a7:ca:5f:ec:af:2d:
89:31:f0:fa:57:3e:d6:a6:be:d2:ef:16:c8:35:14:
dc:55:fd:05:17:22:8c:fd:69:4a:7a:b6:e5:75:27:
55:85:f3:ce:db:a7:c7:db:2e:13:3a:13:63:f9:e5:
d2:1d:a1:6f:6b:7d:ca:d3:01:36:b1:22:20:83:6f:
cf:ed:29:c5:fc:a6:49:87:f4:27:33:e1:82:a3:8d:
ed:fa:d3:b1:f5:98:a1:fb:b4:00:e4:c1:41:24:2d:
f4:95:b0:6c:b5:b3:fd:01:ad:7e:e8:02:7d:7f:af:
16:8d:ca:b0:0c:39:f6:3b:e1:47:2e:6a:00:61:58:
ab:f5:9d:86:e1:df:92:b8:fb:b9:9b:20:ce:f5:44:
18:6b:fe:01:4f:8a:ed:c9:ea:2a:6a:c8:b4:30:2a:
05:51:bc:bf:0c:b5:94:c3:48:df:28:2f:7a:20:fd:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:90:06:0D:10:8E:72:AF:18:88:20:D9:E6:7C:47:B5:8A:77:8E
X509v3 Authority Key Identifier:
keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:fa:c8:d9:ad:94:b1:ac:d8:4d:e1:af:ed:40:c2:67:65:
9c:8a:80:c2:a3:1d:01:b7:84:9f:e5:9d:58:6c:34:cc:7a:eb:
6a:9e:75:4c:aa:0a:95:9d:39:c4:a3:89:0f:ab:bd:28:75:59:
90:51:c7:32:5a:1a:d7:b4:0e:5f:86:b9:bb:1c:23:8c:f9:16:
fe:59:99:a0:29:0c:30:f8:15:f9:fc:aa:c7:cf:cd:5d:e7:c1:
fb:4c:b4:01:fa:41:38:03:90:78:9e:ad:82:f4:90:b5:bf:ac:
81:d6:a6:68:6f:ce:60:bd:1b:b5:06:6b:9b:a1:0c:12:dd:e4:
4c:0f:a0:29:f7:6d:86:e2:8f:6f:df:d6:fa:57:66:cc:9b:f8:
06:f4:e2:56:b1:13:73:7a:07:95:8b:ee:56:29:e8:a5:56:63:
f2:98:74:a2:5e:62:32:c9:a9:2a:f6:cf:82:a1:43:ac:0f:de:
ec:f7:32:30:d3:b2:81:cb:f4:c5:56:cd:fd:4a:fa:9b:88:f0:
b7:19:09:93:ea:26:b2:25:9d:43:80:51:d0:4e:27:40:d4:23:
d2:34:0b:c9:f2:4b:af:6a:48:5a:b8:21:ba:57:65:c4:a3:a9:
f3:56:12:ee:15:ce:b7:12:04:b3:3e:2f:5d:40:31:92:3b:e0:
05:1f:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:09 2026 by rpki-client